I have a client that has about 100-200 hosts connected through a maze
of "home" routers (linksys, dlink, netgear, etc) and switches. It is
a peer to peer network; there are no servers. At its most basic form
it looks something like this:

ISP
|
ROUTER (DHCP)
|
SWITCH
|
WIRELESS ROUTER (NO DHCP)
|
PC


The top-most router is a D-Link Gaming Router (DGL 4300). We are
interested in monitoring traffic on the network (from this top-most
router/network) to determine who is sucking up all the bandwidth.
We've experimented with packet sniffing and have been able to get a
general idea of which computers are the most active (IE: if someone is
using Torrents its easy to spot them making 200 concurrent connections
in the sniffer... if someone is using the web its easy to see that
activity on port 80).

My question: is there any kind of software for properly anazlying what
is going on? Similar to a packet sniffer but much more oriented
towards small network administration. IE: something that could show
how much data has been sent/received from each IP address, how many
connections each IP address has active, where the bandwidth is all
going... etc etc etc.


Any suggestions?

>
> My question: is there any kind of software for properly anazlying what
> is going on? Similar to a packet sniffer but much more oriented
> towards small network administration. IE: something that could show
> how much data has been sent/received from each IP address, how many
> connections each IP address has active, where the bandwidth is all
> going... etc etc etc.
>
> Any suggestions?

Have a look at http://www.ntop.org/